252c9c83a61b07cb2663aeac2cf30df0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

252c9c83a61b07cb2663aeac2cf30df0
Size

7KB
MD5

252c9c83a61b07cb2663aeac2cf30df0
SHA1

a7d9577785b729f992d0b4f306acd0b49f2cb788
SHA256

5f85e87dd4c6dbae2cebcd223678864a848a7ff5f0da57d77fa0aada54fe15a5
SHA512

078ae2224f53a7ccf4f6298037f71a671a5d9e9521cad689d02a19ac09f1ac29c64fd12364e93d85bf6c6ba8784573d38a1172ef7b8c9b380e3abe34b6882f58
SSDEEP

192:siH4OooooooocUPjoooooooooooooooooooooooooooVvPXFiCoooooooooooooH:34OooooooocUrooooooooooooooooooD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
252c9c83a61b07cb2663aeac2cf30df0

Files

252c9c83a61b07cb2663aeac2cf30df0
.exe windows:1 windows x86 arch:x86

4afcd3281e13fec5d5a0ab4d92335928

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

icmp

IcmpCloseHandle
IcmpSendEcho
do_echo_req
IcmpCreateFile

lz32

LZClose
CopyLZFile
LZCloseFile
LZDone
LZInit
LZRead

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE